Case skynet-prompt-injection-malwarePrompt injectionNetherlands
Skynet malware sample embeds prompt injection to fool AI malware analysis tools
Check Point found a half-finished Windows sample on VirusTotal with a string telling any analysing LLM to ignore instructions, act as a calculator and reply NO MALWARE DETECTED; it failed against o3 and GPT-4.1.
LowAttack on AIStatus: UnresolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jun 25, 2025
- Location
- Netherlands
- Target
- LLM-based malware analysis pipelines
- Severity
- Low
- Triggered by
- Unknown
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- None
What happened
Check Point found a half-finished Windows sample on VirusTotal with a string telling any analysing LLM to ignore instructions, act as a calculator and reply NO MALWARE DETECTED; it failed against o3 and GPT-4.1.
Impact: No successful evasion observed; Check Point called it an early sign of malware targeting AI auditing tools.
Who triggered it
Actor: Unknown
Attribution: Uploaded anonymously from the Netherlands in early June 2025; author unknown.
Motive: Evade AI-assisted detection and triage
How it happened
Attack vector: Hardcoded natural-language prompt inside the binary alongside sandbox checks, Tor proxy and string obfuscation
Root cause: AI analysis tools ingest attacker-controlled code as text, creating an injection surface
Timeline
- Sample uploaded to VirusTotal via web interface
- Check Point publishes analysis after testing injection against OpenAI models
Response
Check Point tested the injection and published the sample analysis as a warning to AI-tool builders.
Current status: Unresolved
Sources (open in a new tab)
- Check Point Research research.checkpoint.com
- GovInfoSecurity govinfosecurity.com
Cite this case
Skynet malware sample embeds prompt injection to fool AI malware analysis tools. AI Threat Watch, case skynet-prompt-injection-malware, Jun 25, 2025. https://aithreat.io/cases/skynet-prompt-injection-malware/
Permanent link: https://aithreat.io/cases/skynet-prompt-injection-malware/